PT-2025-3364 · Beijing Sogou Technology Development Co. · Sogou Input

Published 2025-01-27 · Updated 2025-01-27 · CVE-2024-56963

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Beijing Sogou Technology Development Co., Ltd Sogou Input version 12.2.0

Description An issue in the software allows attackers to access sensitive user information via supplying a crafted link. This is achieved by providing a manipulated link, which enables unauthorized access to confidential user data.

Recommendations For version 12.2.0, consider restricting access to sensitive user information until a patch is available. As a temporary workaround, avoid using links from untrusted sources to minimize the risk of exploitation.

Fix

Open Redirect

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-601

CWE-922

Related Identifiers

CVE-2024-56963

Affected Products

Sogou Input

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-56963 · Security Note
• https://t.me/cvedetector/16515 · Telegram Post
• https://twitter.com/CVEnew/status/1883951109137727698 · Twitter Post
• https://github.com/ZhouZiyi1/Vuls/blob/main/241228-SogouInput/241228-SogouInput.pdf · Note